Computer product, countermeasure support apparatus, and countermeasure support method

Abstract

A computer-readable recording medium stores a countermeasure support program that causes a computer to execute a process that includes calculating a time period elapsing from an occurrence timing of a message that is of a predetermined type and related to an operation of an apparatus in a monitored system, until an occurrence timing of a fault; and outputting the calculated elapsed time period.

What is claimed is: 
     
         1 . A non-transitory computer-readable recording medium stores a countermeasure support program that causes a computer to execute a process comprising:
 calculating a time period elapsing from an occurrence timing of a message that is of a predetermined type and related to an operation of an apparatus in a monitored system, until an occurrence timing of a fault; and   outputting the calculated elapsed time period.   
     
     
         2 . The non-transitory computer-readable recording medium according to  claim 1 , the process further comprising:
 searching among messages occurring in the system, for a message that is of a predetermined type, is a sign of a specific fault, and occurs before occurrence of the specific fault;   identifying an occurrence time point of the specific fault by referring to a database that stores occurrence time points of faults occurring in the system;   calculating a time period from a time when a sign of the specific fault occurs until a time when the specific fault occurs, based on an occurrence time point of the retrieved message of the predetermined type and the identified occurrence time point of the specific fault; and   outputting a calculation result acquired at the calculating.   
     
     
         3 . The non-transitory computer-readable recording medium according to  claim 2 , of the process further comprising
 detecting the message of the predetermined type occurring in the system, wherein   the outputting includes outputting when the message of the predetermined type is detected, the calculated time period that is from occurrence of the sign of the specific fault until occurrence of the specific fault.   
     
     
         4 . The non-transitory computer-readable recording medium according to  claim 3 , the process further comprising
 selecting based on the time period that is from the occurrence of the sign of the specific fault until the occurrence of the specific fault and when the message of the predetermined type is detected, a candidate countermeasure against the specific fault, the candidate countermeasure being selected from a candidate countermeasure database that correlates and stores candidate countermeasures against the specific fault and a time period necessary for execution of the candidate countermeasure, wherein   the outputting includes outputting the selected candidate countermeasure against the specific fault.   
     
     
         5 . The non-transitory computer-readable recording medium according to  claim 4 , wherein
 the selecting the candidate countermeasure against the specific fault includes selecting from the candidate countermeasure database, a candidate countermeasure whose time period necessary for execution is shorter than the time period that is from the occurrence of the sign of the specific fault until the occurrence of the specific fault.   
     
     
         6 . The non-transitory computer-readable recording medium according to  claim 2 , wherein
 the specific type is a combination at least one type,   the searching for a message that is of a predetermined type includes searching among the messages occurring in the system, for a message of each type included in the combination, and   the calculating the time period until the time when the specific fault occurs, includes calculating a time interval that is from an occurrence time point that is latest among occurrence time points of messages retrieved at the searching, until the identified occurrence time point of the specific fault.   
     
     
         7 . The non-transitory computer-readable recording medium according to  claim 6 , wherein
 the identifying the occurrence time point of the specific fault includes identifying, by referring to the database, the occurrence time point of the specific fault occurring within a predetermined time period from the occurrence time point that is latest among the occurrence time points of the messages retrieved at the searching.   
     
     
         8 . The non-transitory computer-readable recording medium according to  claim 7 , wherein
 when a second time period from the occurrence of the sign of the specific fault until the occurrence of the specific fault is calculated after a first time period from the occurrence of the sign of the specific fault until the occurrence of the specific fault is calculated, the calculating includes calculating the time period from the occurrence of the sign of the specific fault until the occurrence of the specific fault based on the first and the second time periods.   
     
     
         9 . A countermeasure support apparatus comprising
 a processor configured to:   calculate a time period elapsing from an occurrence timing of a message that is of a predetermined type and related to an operation of an apparatus in a monitored system, until an occurrence timing of a fault; and   output the calculated elapsed time period.   
     
     
         10 . A countermeasure support method executed by a computer, the countermeasure support method comprising:
 calculating a time period elapsing from an occurrence timing of a message that is of a predetermined type and related to an operation of an apparatus in a monitored system, until an occurrence timing of a fault; and   outputting the calculated elapsed time period.